EU cookie rule on tracking consent

[stefanies325986]

Hi there,

you might have heard that there will be a new EU regulation which means that the user needs to actively check a box before we can use any kind of tracking/analytics.

https://www.independent.co.uk/life-style/gadgets-and-tech/news/eu-cookie-rules-tracking-opt-in-priva...

This is rather annoying because we collect no personal data at all.

Is anyone aware of ideas how to solve this issue?

Regards

Stefanie

[David_Jerome]

Hi Stefanie,

This was raised by our legal team this week.

Thanks

Dave

[David_Jerome]

Forgot to mention - I am keeping a close eye on this. At the moment our main defence to legal was that there are no large eCommerce companies doing it and that will should follow their lead for the moment.

[Pablo_Childe · Accepted solution]

Hi the challenge is that certain types of data we collect today are considered private data. (IP) for example can be in certain cases.

Its important to work with your internal legal teams, have them clarify limitations. You also should update and check your own sites TOCs

The excuse of our data being anonymized and aggregative will likely not be sufficient.

I have started to capture the action itself of Warning cookie presented, and clicked. It will be a key measure to show the impact of this new potential mandatory data policy.

regards

[stefanies325986]

we have only got hashed IPs

[stefanies325986]

How about this option:

the problem seems to be the VisitorID in the Adobe cookies with which one could theoretically draw conclusions from the user.

However, almost all of our analysis are based on visits.

Would it be possible to switch from "Experience Cloud Visitor ID" to "Experience Cloud Visit ID"?

We would then switch all evars to "expire after Visit".

Can you tell me if it would be technically possible?

Of course we would not be able to do certain evaluations like the "Visit Number Report" but that might be better than losing data.

[Pablo_Childe]

Hi sorry just to back track a bit...

What is the issue you are trying to fix?

Is it to avoid to have to show the pop up for cookie acceptance?

[stefanies325986]

Yes, some people say that we need to get the agreement on any cookies...

users should only be allowed to enter the website after telling us which cookies they accept and which not. This could mean that we would lose half of our analytics data (or more)!

[stefanies325986]

If the cookie is session-based, it might be treated like logfiles and logfiles are allowed. So we would not need any consent...

[stefanies325986]

... even better would be server-side implementation without any cookies!

[stefanies325986]

here a few links on the topic:

https://www.pedromonjo.com/2018/06/server-side-adobe-analytics/

https://helpx.adobe.com/marketing-cloud/how-to/data-collection.html

https://www.pedromonjo.com/2019/07/hybrid-analytics/

https://www.pedromonjo.com/2018/05/server-side-digital-marketing/

[stefanies325986]

Adobe Target server-side optimization—well beyond a testing solution | Adobe Blog

[jantzen_b]

Do any of these replies provide an answer to your original question? If so, please mark the most correct answer. If not, can you provide some additional details to help the community better answer your question.

[sztibu]

Hi Stefanie,

Did you find a solution to this at the end? Some kind of out-of-the-box cookie-less ananymous tracking?

Thanks

Tibor

[jantzen_b]

I know many of our customers are using the TrustArc extension in Experience Platform Launch to help manage consent.

https://exchange.adobe.com/experiencecloud.details.100058.trustarc-cookie-consent-manager.html